This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.mft
File: r_zmN5iBZebFG_v-vRKD1REkAZA.mft (raw, json)
Hash identifier: hNlI24Nd3//WXWSigpx6WVnXrHTeng3RR6M6Uf7ZVX0=
Subject key identifier: 36:75:A2:48:1B:6C:82:9D:52:F3:D6:FF:69:29:0A:10:E8:BE:BE:45
Authority key identifier: AF:FC:E6:37:98:81:65:E6:C5:1B:FB:FE:BD:12:83:D5:11:24:01:90
Certificate issuer: /CN=A91E4468/serialNumber=AFFCE637988165E6C51BFBFEBD1283D511240190
Certificate serial: 0188
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_zmN5iBZebFG_v-vRKD1REkAZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.mft
Manifest number: 0180
Signing time: Fri 05 Dec 2025 01:56:05 +0000
Manifest this update: Fri 05 Dec 2025 01:56:05 +0000
Manifest next update: Fri 12 Dec 2025 01:56:05 +0000
Files and hashes: 1: r_zmN5iBZebFG_v-vRKD1REkAZA.crl (hash: KTKrSQK09jVb44kJyvmqHXDTJd6Yqa0315WpapU930k=)
2: C531DD12226F11EF8D24AD63C4F9AE02.roa (hash: a2/vehSWDoff6mLTg7VEADcM0ey8iDfcQQZxJYEqkDM=)
3: C608133C226F11EF8D24AD63C4F9AE02.roa (hash: GATUqbNDhKaVb/i1ZjCIO1rgwevFVCyWk8Ts83izVL4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.crl
rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_zmN5iBZebFG_v-vRKD1REkAZA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 01:56:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 392 (0x188)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4468, serialNumber=AFFCE637988165E6C51BFBFEBD1283D511240190
Validity
Not Before: Dec 5 01:56:05 2025 GMT
Not After : Dec 12 01:56:05 2025 GMT
Subject: CN=69323bb5-7c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:79:e4:9c:62:f9:57:89:4e:da:29:40:fb:e3:
b7:e7:53:ad:d2:79:4b:ce:5f:22:fa:94:7a:79:9c:
f4:a5:2a:ee:09:e3:f0:7b:67:42:c8:a0:58:97:54:
3a:01:93:43:be:57:f3:76:7f:e0:2f:e2:ec:0a:8c:
99:f3:17:80:e0:e2:b6:23:b5:72:97:7d:4a:e0:38:
86:0e:7a:94:78:39:d9:a8:73:ad:2e:21:75:41:6c:
cc:2f:23:9d:25:0d:b8:55:da:0c:ae:ad:40:0b:27:
10:89:c9:e6:a4:3d:ca:34:b5:1b:11:d1:48:59:b9:
31:ab:a5:ba:be:6a:16:de:5c:d9:46:0d:3a:9f:b6:
3a:5f:56:5b:9c:f4:67:5c:6e:6b:09:48:f4:c0:c6:
8c:2f:c4:78:65:82:5e:cc:a3:96:5b:33:55:bc:48:
98:d6:63:22:1c:b1:bf:33:3d:04:2d:22:e1:94:43:
ca:e8:4b:99:05:2d:9f:ab:ba:40:99:19:3a:60:d6:
15:3b:f4:45:20:89:e4:92:b6:72:2c:cb:af:a8:13:
62:c8:b4:31:67:fb:34:1d:dc:1d:63:25:a2:48:5c:
a5:9e:20:45:95:84:b0:b8:11:10:a2:61:31:8e:66:
b4:31:68:f2:ac:dc:6f:a0:72:52:99:3a:e8:fb:6f:
3d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:75:A2:48:1B:6C:82:9D:52:F3:D6:FF:69:29:0A:10:E8:BE:BE:45
X509v3 Authority Key Identifier:
keyid:AF:FC:E6:37:98:81:65:E6:C5:1B:FB:FE:BD:12:83:D5:11:24:01:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_zmN5iBZebFG_v-vRKD1REkAZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:57:43:c0:92:66:3a:e2:07:73:7e:2d:02:09:db:c5:6f:e6:
5c:0c:f0:6e:af:1e:75:26:a2:0a:b4:02:9f:b0:82:b1:b2:32:
3d:07:90:d6:51:39:af:c6:9c:2a:ae:b5:4a:bd:2d:76:fe:2e:
f1:e8:19:33:f4:8f:67:fd:06:89:f0:e7:45:84:dd:51:0d:f0:
cb:7d:33:8b:4c:49:53:80:d2:6c:a0:0d:9c:25:c8:f2:f1:b5:
77:17:f7:ea:fa:1b:bc:7e:cf:5e:8a:af:d2:06:8c:cf:58:0e:
f0:e1:99:e1:42:ac:89:c6:74:2f:11:10:b1:79:34:2e:5b:f3:
cc:d8:2a:1d:c1:53:3b:c7:47:c6:aa:6f:e6:78:ba:0a:a7:38:
8a:11:9c:27:aa:13:4a:ba:c1:41:76:9f:81:43:79:80:71:6c:
cf:5f:4b:a6:b0:92:67:bf:18:d6:d6:c8:97:11:33:be:65:7f:
1d:f3:4e:69:6c:fd:1d:8f:fe:05:9c:55:67:6b:02:ba:7a:01:
63:e6:0c:d4:a3:c2:bc:76:f3:65:13:42:c2:ae:45:9b:25:88:
b2:58:57:9d:4f:ec:e9:bf:8c:60:5a:bc:95:9f:13:3b:40:3e:
08:05:5c:d3:3b:e2:a1:ac:51:45:30:09:75:db:95:c0:dd:31:
07:06:3c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:43:06 2025 by rpki-client